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TO THE COMMISSIONER FOR PATENTS 
Mail Stop Patent Application 

P.O. Box 1450 
Alexandria, VA 22313-1450 

Transmitted herewith for filing under 35 U.S.C. 11 1 (a) and 37 C.F.R. 1 .53(b) is a new utility patent application for an 

inv ention entitled: 

SYSTEM^ method AND PROGRAM PRODUCT FO R DETECTING UNKNOWN COMPU T ER A TT ACKS 



ON 



and invented by: 



K. G. Thiele et al 


ASSIGNEE: INTERNATIONAL BUSINESS: MACHINES ! 




CORPORATION 




ARMONK, NEW YORK 10504 



If a CONTINUATION APPLICATION, check appropriate box and supply the requisite information: 

□ Continuation □ Divisional □ Continuation-in-part (CIP) of prior application No.: 
Which is a: 

□ Continuation □ Divisional □ Continuation-in-part (CIP) of prior application No.: 
Which is a: 

□ Continuation □ Divisional □ Continuation-in-part (CIP) of prior application No.: 
Enclosed are: 

Application Elements 

1 . IS Filing fee as calculated and transmitted as described below 

2. m Specification having 16 pages and including the following: 

a. S3 Descriptive Title of the Invention 

b. □ Cross References to Related Applications (if applicable) 

c. □ Statement Regarding Federally-sponsored Research/Development (if applicable) 

d. □ Reference to Sequence Listing, a Table, or a Computer Program Listing Appendix 

e. H Background of the Invention 

f. Kl Brief Summary of the Invention 

g. (E) Brief Description of the Drawings (if filed) 

h. S Detailed Description 

i. IE) Claim(s) as Classified Below 
j. S<) Abstract of the Disclosure 
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Application Elements (Continued) 

3. g) Drawing(s) (when necessary as prescribed by 35 USC 1 13) 
a. □ Formal Number of Sheets 



b. Kl Informal Number of Sheets 9 



4. S Oath or Declaration 

a. a Newly executed (original or copy) □ Unexecuted 

b. □ Copy from a prior application (37 CFR 1 .63(d)) (for continuation/divisional application only) 

c. 13 With Power of Attorney □ Without Power of Attorney 

d. □ DELETION OF INVENTORY) 

Signed statement attached deleting inventor(s) named in the prior application, 
see 37 C.F.R. 1.63(d)(2) and 1.33(b). 

5. □ Incorporation By Reference (usable if Box 4b is checked) 

The entire disclosure of the prior application, from which a copy of the oath or declaration is supplied under 
Box 4b, is considered as being part of the disclosure of the accompanying application and is hereby 
incorporated by reference therein. 

6. □ CD ROM or CD-R in duplicate, large table or Computer Program (Appendix) 

7. □ Application Data Sheet (See 37 CFR 1 .76) 

8. □ Nucleotide and/or Amino Acid Sequence Submission (if applicable, all must be included) 

a. □ Computer Readable Form (CRF) 

b. □ Specification Sequence Listing on: 

i. □ CD-ROM or CD-R (2 copies); or 

ii. □ Paper 

c. □ Statement(s) Verifying Identical Paper and Computer Readable Copy 

Accompanying Application Parts 

9. IE) Assignment Papers (cover sheet & document(s)) 

10. □ 37 CFR 3.73(B) Statement (when there is an assignee) 

11. □ English Translation Document (if applicable) 

12. (x) Information Disclosure Statement/PTO-1 449 □ Copies of IDS Citations 

13. □ Preliminary Amendment 

14. (2 Return Receipt Postcard (MPEP 503) (Should be specifically itemized) 

1 5. □ Certified Copy of Priority Document(s) (if foreign priority is claimed) 

16. (x| Certificate of Mailing 

□ First Class ED Express Mail (Specify Label No.): EV 342658865 US 
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Accompanying Application Parts (Continued) 

1 7. □ Additional Enclosures (please identify below): 



Request That Application Not Be Published Pursuant To 35 U.S.C. 122(b)(2) 

18. □ Pursuant to 35 U.S.C. 122(b)(2), Applicant hereby requests that this patent application not be 
published pursuant to 35 U.S.C. 122(b)(1). Applicant hereby certifies that the invention disclosed in 
this application has not and will not be the subject of an application filed in another country, or under 
a multilateral international agreement, that requires publication of applications 18 months after filing 
of the application. 

Warning 

An applicant who makes a request not to publish, but who subsequently files in a foreign 
country or under a multilateral international agreement specified in 35 U.S.C. 122(b)(2)(B)(i), 
must notify the Director of such filing not later than 45 days after the date of the filing of 
such foreign or international application. A failure of the applicant to provide such notice 
within the prescribed period shall result in the application being regarded as abandoned, 
unless it is shown to the satisfaction of the Director that the delay in submitting the notice 
was unintentional. 
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Fee Calculation and Transmittal 



CLAIMS AS FILED 



For 



#Filed 



#Allowed 



#Extra 



Rate 



Fee 



Total Claims 



20 



20 = 



$18.00 



$0.00 



Indep. Claims 



- 3 = 



x $84.00 



$0.00 



Multiple Dependent Claims (check if applicable) □ 



$0.00 



BASIC FEE 



$750.00 



OTHER FEE (specify purpose) 



$0.00 



TOTAL FILING FEE 



$750.00 



□ A check in the amount of to cover the filing fee is enclosed. 

The Director is hereby authorized to charge and credit Deposit Account No. 09-0457 
as described below. 

13 Charge the amount of $750.00 as filing fee. 

(3 Credit any overpayment. 

13 Charge any additional filing fees required under 37 C.F.R. 1.16 and 1.17. 
□ Charge the issue fee set in 37 C.F.R. 1.18 at the mailing of the Notice of Allowance, 
pursuant to 37 C.F.R. 1.311(b). 



Dated: 



^Signature 



ignature 

Arthur J. Samodovitz Reg. No: 31,297 
IBM Corporation Dept. IQOA/BIdg. 40-3 
1701 North Street 
Endicott,NY 13760 



cc: RECORDS 
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CERTIFICATE OF MAILING BY "EXPRESS MAIL" (37 CFR 1.10) 

Appiicant(s): F. G. Thiele et al 



Docket No. 
END920030068US1 



Serial No. 



Filing Date 
Herewith 



Examiner 



Group Art Unit 



Invention SYSTEM > METHOD AND PROGRAM PRODUCT FOR DETECTING UNKNOWN COMPUTER 
ATTACKS 



I hereby certify that the following correspondence: 



Post Card, Patent App. & related paperwork & IDS 



(Identify type of correspondence) 

is being deposited with the United States Postal Service "Express Mail Post Office to Addressee" service under 37 
CFR 1.10 in an envelope addressed to: Commissioner for Patents, P.O. Box 1450, Alexandria, VA 22313-1450 on 

8/27/2003 



(Date) 

Denise M. Jurik 



(Typed or Printed Name of Person Mailing Correspondence) 



(Signature of Person MaiMg Correspondence) 
EV 342658865 US 



("Express Mail" Mailing Label Number) 



Note: Each paper must have its own certificate of mailing. 
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